This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json) Hash identifier: ZN140f0ICud+1WKu/VWJEUKD45zdRppPd/UUdOFBXf4= Subject key identifier: 57:CA:03:87:12:8B:14:4E:A7:44:E7:93:4B:BD:2D:1B:21:5A:80:7C Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Certificate serial: 019B3C1036F6100163085E3A3F72B95BAA12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft Manifest number: 14D3 Signing time: Sat 20 Dec 2025 14:00:53 +0000 Manifest this update: Sat 20 Dec 2025 14:00:53 +0000 Manifest next update: Sun 21 Dec 2025 14:00:53 +0000 Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: HxYKF43VwrVqEPNIl6is15phRd3tVkCHs8JuBdIBDYw=) 2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=) 3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:36:f6:10:01:63:08:5e:3a:3f:72:b9:5b:aa:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Validity Not Before: Dec 20 14:00:53 2025 GMT Not After : Dec 21 14:00:53 2025 GMT Subject: CN=57ca0387128b144ea744e7934bbd2d1b215a807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:03:18:32:e8:4d:e5:e2:41:a5:55:03:bf: 36:61:91:fa:58:4d:c6:db:06:53:48:7d:d2:7c:83: 08:18:96:71:0b:ae:0a:60:f6:ed:62:32:5f:53:c0: be:22:ef:3d:7f:93:af:98:c4:a1:70:1e:8b:6f:75: cd:0b:2b:e6:ef:4d:1a:60:14:67:62:06:e0:b1:34: 42:3e:31:22:c8:fe:8c:4e:34:94:0a:b3:50:7c:4f: 54:05:8e:e2:db:4d:ca:9d:73:f6:83:34:f7:9f:25: f6:95:49:81:af:33:ea:e9:6a:b9:1c:04:9e:7a:39: 8e:94:de:0a:70:9d:55:e7:c4:e1:75:d6:2b:65:cc: 53:d9:42:ff:18:e8:ce:81:a6:dc:b5:2e:a9:09:46: 6d:b9:45:80:c8:ce:b0:bd:1f:f2:6c:22:3e:d4:aa: 72:66:b5:e6:b6:89:74:41:a5:70:1c:84:d3:f6:5a: 10:a8:7e:51:ce:86:75:96:f8:18:b3:08:a9:9e:eb: 52:90:29:78:4f:ba:7a:17:d8:c0:e5:c1:cf:4e:72: 5c:58:4e:58:4b:06:55:46:57:17:b2:3f:5f:f3:b3: cc:e1:97:3b:46:ae:40:54:d9:88:70:ae:cd:2f:14: 8f:6b:70:bc:96:aa:55:4c:4c:bb:c8:cf:dc:1f:dd: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CA:03:87:12:8B:14:4E:A7:44:E7:93:4B:BD:2D:1B:21:5A:80:7C X509v3 Authority Key Identifier: keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ee:a4:4b:f5:3e:bd:91:7a:8b:7e:e7:02:51:d4:b8:90:53: 53:eb:ae:f9:5e:49:1b:99:6c:6a:bd:a9:14:7d:ba:f4:b9:31: d5:e2:f3:4e:fb:0a:1c:1b:90:0b:50:1a:cb:fd:3b:1c:c3:d3: ee:a2:5f:56:df:04:05:9b:d5:71:f0:d3:4c:c2:e5:d5:11:18: bc:49:a5:45:a9:b6:b4:11:5b:5d:eb:c1:53:93:82:0a:f9:30: 8d:fc:01:de:c0:d7:2d:49:aa:31:90:3e:9b:e8:d1:8c:4f:c5: 7c:c5:28:46:06:3b:c8:31:fd:f2:84:95:1e:47:9c:5c:28:12: f2:92:67:74:92:cd:3c:06:f0:8c:6b:e4:d4:9f:f2:b6:ff:86: 3a:27:f3:62:27:17:8b:8c:6c:f0:5f:1f:1a:a6:7a:fe:c8:7d: 41:c6:d2:fb:f7:66:1e:50:c2:84:c6:63:ac:50:a4:d9:99:62: f3:6c:66:84:c7:4f:30:b3:3f:c4:81:86:0e:3f:6c:83:f6:7e: 6d:46:26:f0:f9:bc:8e:33:3f:a0:d4:75:03:f2:a2:58:1c:a3: dc:c1:76:43:d2:a8:3d:20:61:ff:ba:a8:0d:0b:82:16:c2:99: 04:5b:5a:a9:5c:14:16:32:99:43:45:4d:dd:62:02:5f:b1:4a: a0:81:f6:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EDb2EAFjCF46P3K5W6oSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2 OTQyNTAwHhcNMjUxMjIwMTQwMDUzWhcNMjUxMjIxMTQwMDUzWjAzMTEwLwYDVQQD Eyg1N2NhMDM4NzEyOGIxNDRlYTc0NGU3OTM0YmJkMmQxYjIxNWE4MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlsDGDLoTeXiQaVVA782YZH6WE3G 2wZTSH3SfIMIGJZxC64KYPbtYjJfU8C+Iu89f5OvmMShcB6Lb3XNCyvm700aYBRn YgbgsTRCPjEiyP6MTjSUCrNQfE9UBY7i203KnXP2gzT3nyX2lUmBrzPq6Wq5HASe ejmOlN4KcJ1V58ThddYrZcxT2UL/GOjOgabctS6pCUZtuUWAyM6wvR/ybCI+1Kpy ZrXmtol0QaVwHITT9loQqH5RzoZ1lvgYswipnutSkCl4T7p6F9jA5cHPTnJcWE5Y SwZVRlcXsj9f87PM4Zc7Rq5AVNmIcK7NLxSPa3C8lqpVTEy7yM/cH935dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfKA4cSixROp0Tnk0u9LRshWoB8MB8GA1UdIwQY MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt YmYyODg3NWFiMjYxLzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu6kS/U+ vZF6i37nAlHUuJBTU+uu+V5JG5lsar2pFH269Lkx1eLzTvsKHBuQC1Aay/07HMPT 7qJfVt8EBZvVcfDTTMLl1REYvEmlRam2tBFbXevBU5OCCvkwjfwB3sDXLUmqMZA+ m+jRjE/FfMUoRgY7yDH98oSVHkecXCgS8pJndJLNPAbwjGvk1J/ytv+GOifzYicX i4xs8F8fGqZ6/sh9QcbS+/dmHlDChMZjrFCk2Zli82xmhMdPMLM/xIGGDj9sg/Z+ bUYm8Pm8jjM/oNR1A/KiWByj3MF2Q9KoPSBh/7qoDQuCFsKZBFtaqVwUFjKZQ0VN 3WICX7FKoIH2wA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:08 2025 by rpki-client